To be honest, Ordinals put a huge target on his back. It has created a bunch of disgruntled people who will pull out all the punches to get rid of Ordinals and make the mempool congestion the way it was before. DDoS is a popular (and illegal) attack vector for achieving that.

If I were him, I would move to new hosting or maybe liquidate some $ORDI to fund a Cloudflare Business subscription, which can stop Layer 3/4 DDoS attacks, unlike the free version which can't. I actually learned this the hard way myself, after my own site was DDoS'ed recently. But since I'm not Rich Uncle Pennybags and can't afford/justify a Business subscription for this kind of thing, I just changed servers instead.